My guess is you would either need something the _compromised_ system could not obtain/remember, or something that, would it be obtained/remembered by the system, isn't useable twice.
Any thoughts on this? Kind regards, Jeroen van Meeuwen -- kanarip _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
